[SSSD] [PATCH] Bad check for id_provider=local and access_provider=permit

Ariel Barria olivares73 at hotmail.com
Thu May 10 16:56:27 UTC 2012


Thanks for explanation :).
Something like that?

tmp = ldb_msg_find_attr_as_string(res->msgs[0],CONFDB_DOMAIN_ACCESS_PROVIDER,NULL);
        if (tmp && strcasecmp(tmp, "permit") != 0) {
            .......
            
And documentatión

 <term>access_provider (string)</term>
         <listitem>
                <para>
                           The access control provider used for the domain.
                            There are two built-in access providers (in
                            addition to any included in installed backends)
                            Internal special providers are:
                        </para>
                        <para>
                            <quote>permit</quote> always allow access. It's the only permitted access provider for a local domain. 

> Date: Thu, 10 May 2012 11:31:58 +0200
> From: jhrozek at redhat.com
> To: sssd-devel at lists.fedorahosted.org
> Subject: Re: [SSSD] [PATCH] Bad check for id_provider=local and access_provider=permit
> 
> On Thu, May 10, 2012 at 01:01:44AM -0500, Ariel Barria wrote:
> >    apologize for the patch file name :D
> > 
> >    https://fedorahosted.org/sssd/ticket/1172
> 
> Hi Ariel,
> 
> thank you very much for the patch! The naming and formatting of the patch
> is fine.
> 
> This approach would remove the startup error as described in the ticket
> but maybe it would be better if the "permit" access provider because
> that's what the local provider does internally anyway. It would also warn
> administrators who tries to use some other access
> 
> So I think the proper fix would be to swap "local" for "permit" in the check.
> We should probably also amend the documentation (src/man/sssd.conf.5.xml)
> where the permit access provider is described to say that it's the only
> allowed access provider for a local domain.
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20120510/da646ec7/attachment.html>


More information about the sssd-devel mailing list